API Engineer

Summary:

Builds and runs the API layer OJP already depends on and adds the new APIs the roadmap approves. The estate is about 50 APIs, about 20 applications, and about 40 Red Hat virtual machines across six environments.

Responsibilities:

·         Perform WSO2 API Manager lifecycle work: create and version APIs, maintain the catalog, build custom APIs, guide product teams, and manage throughput and rate limits.

·         Administer the WSO2 platform other than the operating system. Current modules to keep at N or N-1: API Manager 3.2.0, Identity Server 5.10.0, and Micro Integrator 4.3, on about 40 AWS Red Hat Enterprise Linux virtual machines in Dev, Sandbox, QA, UAT, Staging, and Production.

·         Test WSO2 on lower and upper environments before and after Networking’s monthly Linux patch. Do not patch the operating system or administer the virtual machines.

·         Implement authentication, authorization, and provisioning into DIAMD (OKTA and SailPoint) using SAML 2.0, OAuth2 / OpenID Connect, and SCIM 2.0, routed through WSO2. Tokens for OAuth2 are short-lived, scoped, and logged. User-facing clients use authorization code with PKCE. Service calls use client credentials.

·         Default new interfaces to REST. Version, authenticate, rate-limit, observe, and catalog them before production. Support JSON, XML, SOAP, XSLT, HTTP, HTML, and JavaScript where the source or target requires it. Do not add ODBC, JDBC, or FTP connectors.

·         Secure data in transit with TLS 1.2 or higher and data at rest with OJP-approved encryption.

·         Respond to help-desk tickets for products in this family. Tier 1 application support and Tier 3 business-rule support stay with other contracts.

·         Turn Status Cake availability signals (about 220 checks) and Splunk logs for these platforms into owned work. This is not SOC operations.

·         Write the API and microservice-transfer documentation future-state products need. Current-state documentation stays minimal.

·         Cross-train with the other API Engineer so vacation or departure does not stop the catalog.

Required qualifications:

·         At least 5 years building and operating APIs in production, including a gateway or manager and not only application code.

·         Production experience with API lifecycle, rate limiting, cataloging, and versioning.

·         Implemented SAML, OAuth2 or OpenID Connect, and SCIM, or a close equivalent you can explain at the protocol level.

·         Comfortable testing application behavior around an operating-system patch that another team applies.

·         Able to obtain High Risk Public Trust (Tier 4) for WSO2 production administration and identity-API access.

Preferred qualifications:

·         WSO2 API Manager, Identity Server, and Micro Integrator, including a version-upgrade while staying on N or N-1.

·         OKTA, SailPoint, or Entra ID integration through a gateway.

·         A high-traffic public API, on the order of millions of requests a month.

·         AWS-hosted API infrastructure and Red Hat Enterprise Linux application troubleshooting that stops short of owning the OS patch.

API management certification or equivalent depth.

Digital HIE is an information technology company focused on connecting Data, Modernizing digital platforms and Engineering secure solutions for public and private organizations.